Intel Xeon 6 E-core with TDX or SGX: MULTI-TENANT ISOLATION: Improper restriction of software interfaces to hardware

CVE-2024-48869Firmware, BMC & network fabriccurated

Impact

MULTI-TENANT ISOLATION: Improper restriction of software interfaces to hardware features on Xeon 6 E-core parts when TDX or SGX is in use. Reaches both confidential-compute technologies on the same silicon, so a single platform update covers both boundaries.

Who can reach it

Local access on an affected Xeon 6 platform with TDX or SGX enabled.

What to do

OEM platform firmware/BIOS update plus TCB recovery for whichever technology you use. Drain, reboot, re-attest.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-48869 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01268.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.